ironic.common.config module¶
- ironic.common.config.validate_image_server_auth_opts()[source]¶
Validate the image server authentication configuration.
When an image server authentication strategy requiring credentials is configured, credentials must only be sent to an explicit set of trusted hosts unless the operator has opted in to sending them to any host. Refuse to start with credentials configured but no host policy, to avoid silently leaking them to untrusted, potentially user-supplied, hosts.
- Raises:
exception.ConfigInvalid if credentials are configured without either
image_server_auth_hostsorimage_server_auth_permit_unknown_hosts.